Security Advisory for Cargo (CVE-2026-5222)
The Rust Security Response Team was notified that Cargo incorrectly normalized the URLs of third-party registries using the sparse index protocol . If a hosting provider allowed multiple registries to…
Security
- Fix Cargo incorrectly normalizing URLs of third-party registries using the sparse index protocol that could allow multiple registries to be accessed through a single endpoint